7460913cc52cb48b58f3bd4d699fd7ad_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

7460913cc52cb48b58f3bd4d699fd7ad_JaffaCakes118
Size

356KB
MD5

7460913cc52cb48b58f3bd4d699fd7ad
SHA1

d0f431de75cb3ca016bf8efd643cb5fd9ca71952
SHA256

08f3ad7980264be80d5e8d1ca064182b067a9b8c8bc6445aecc9bbdc30b42a3b
SHA512

b50ab2936f5785e3b84e4b85c422a9b2cdc9ff8fe9a50cf894e13731b9181df5dc2ee8d606005cf6bc5cbbb0347578739f1076e221a93cf38ddb439314bc7dff
SSDEEP

6144:5lkAMdP/xS//PUYgcapx7niMvmrtBvYQeeaQeebQeesQeedJQeehQeehEjgDV0jd:bJK3W/PUYgcapXsjgsaa2uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7460913cc52cb48b58f3bd4d699fd7ad_JaffaCakes118

Files

7460913cc52cb48b58f3bd4d699fd7ad_JaffaCakes118
.dll windows:5 windows x86 arch:x86

651f8470d3092a90e59d4740d9f56b2f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\Manuel\Desktop\TODOS OS PROGRAMAS\Click Kill !\Click Kill CABR\Release\CABASE.pdb

Imports

kernel32

CreateThread
VirtualProtect
GetModuleHandleA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
DisableThreadLibraryCalls
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
OutputDebugStringA
VirtualAlloc
VirtualFree
GetProcAddress
LoadLibraryA
WideCharToMultiByte
MultiByteToWideChar
IsProcessorFeaturePresent
GetSystemInfo
GetVersionExA
Sleep
UnhandledExceptionFilter
IsBadReadPtr

user32

mouse_event
keybd_event
GetAsyncKeyState
SetRect
MessageBoxA
GetCursorPos
GetSystemMetrics

msvcr90

_initterm
_initterm_e
_decode_pointer
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_encoded_null
_malloc_crt
_encode_pointer
floor
free
modf
iswspace
iswalpha
iswdigit
iswpunct
__CxxFrameHandler
strncpy
??2@YAPAXI@Z
??3@YAXPAX@Z
_ftol
_finite
_CIacos
vsprintf_s
malloc
system
sprintf
memset
__CxxFrameHandler3
_CIsqrt
_CIsin
_CIcos
_CIatan2
memcpy
_amsg_exit
_CIatan

winmm

sndPlaySoundA

gdi32

GetTextMetricsW
GetObjectW
GetTextMetricsA
ExtTextOutW
MoveToEx
ExtTextOutA
CreateCompatibleDC
SetMapMode
SetTextAlign
GetGlyphOutlineA
CreateFontIndirectW
CreateFontIndirectA
GetFontLanguageInfo
GetObjectA
SetBkMode
SetBkColor
SetTextColor
GetCharacterPlacementW
GetCharacterPlacementA
SelectObject
DeleteObject
DeleteDC
CreateDIBSection

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA

Sections

_TEXT
Size: 512B - Virtual size: 431B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 207KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

651f8470d3092a90e59d4740d9f56b2f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

msvcr90

winmm

gdi32

advapi32

Sections

_TEXT Size: 512B - Virtual size: 431B

.text Size: 207KB - Virtual size: 206KB

.rdata Size: 84KB - Virtual size: 83KB

.data Size: 41KB - Virtual size: 52KB

.rsrc Size: 1024B - Virtual size: 688B

.reloc Size: 21KB - Virtual size: 21KB

_TEXT
Size: 512B - Virtual size: 431B

.text
Size: 207KB - Virtual size: 206KB

.rdata
Size: 84KB - Virtual size: 83KB

.data
Size: 41KB - Virtual size: 52KB

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 21KB - Virtual size: 21KB